Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-64600: In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64531: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs
Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool6.12 | 1:6.12.94-123.192.amzn2023 |
| Amazon Linux · 2023 | bpftool6.12-debuginfo | 1:6.12.94-123.192.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.12.94-123.192 | 1:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel6.12 | 1:6.12.94-123.192.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-debuginfo | 1:6.12.94-123.192.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-debuginfo-common-aarch64 | 1:6.12.94-123.192.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-debuginfo-common-x86_64 | 1:6.12.94-123.192.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-devel | 1:6.12.94-123.192.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-headers | 1:6.12.94-123.192.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-modules-extra | 1:6.12.94-123.192.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-modules-extra-common | 1:6.12.94-123.192.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-tools | 1:6.12.94-123.192.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-tools-debuginfo | 1:6.12.94-123.192.amzn2023 |
| Amazon Linux · 2023 | kernel6.12-tools-devel | 1:6.12.94-123.192.amzn2023 |
| Amazon Linux · 2023 | perf6.12 | 1:6.12.94-123.192.amzn2023 |
| Amazon Linux · 2023 | perf6.12-debuginfo | 1:6.12.94-123.192.amzn2023 |
| Amazon Linux · 2023 | python3-perf6.12 | 1:6.12.94-123.192.amzn2023 |
| Amazon Linux · 2023 | python3-perf6.12-debuginfo | 1:6.12.94-123.192.amzn2023 |
Vulnerabilities 2
-
High 7.8CVE-2026-64531 Public exploit
net: openvswitch: reject oversized nested action attrs
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbeh…
-
High 7.8CVE-2026-64600 Public exploit
xfs: resample the data fork mapping after cycling ILOCK
In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK xfs_reflink_fill_{cow_hole,delalloc} are both presented with an inode, a data fork mapping, and a cow fork mapping. Unfortunately, thes…